
canarytokens-docker
Docker configuration to quickly setup your own Canarytokens.

Docker configuration to quickly setup your own Canarytokens.

Corelight@Home script

Log4j Exploit Detection Logic for Zeek

A Zeek package to detect CVE-2021-42292, a Microsoft Excel local privilege escalation exploit.

Detection of RCE in Oracle's WebLogic Server CVE-2020-14882 / CVE-2020-14750

A Zeek ELF File Analyzer

Dynamically generated Suricata rules from real-time threat feeds

Zeek detector for QuasarRat

A Zeek based Mitre Caldera detector.


Zeek detection logic for CVE-2022-30216.

A Zeek protocol analyzer for the Facefish rootkit, based on Spicy.

The first open-source DDoS protection system

Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool

Easy to configure Honeypot for Blue Team

Cisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)

A Prometheus Exporter for Suricata